Privacy Policy

1. Data controller

The data controller responsible for your personal data is:

2. Personal data we collect

We collect only the data we need to operate this website and respond to you:

• Contact data you provide through our contact form: your name, email address, and the content of your message.
• Consent records indicating the choices you make about cookies and the privacy policy.
• Technical data such as your IP address, browser type, device information, and pages viewed, where you allow analytics cookies.

We do not ask for special categories of data, and we ask that you do not include sensitive personal information in your messages.

3. Purposes and legal bases

We process your personal data for the following purposes and on the following legal bases under Article 6 GDPR:

• Responding to enquiries sent through the contact form. Legal basis: your consent and our legitimate interest in answering you (Art. 6(1)(a) and 6(1)(f)).
• Operating and securing the website. Legal basis: our legitimate interest in providing a safe, functional site (Art. 6(1)(f)).
• Measuring and improving the site through optional analytics. Legal basis: your consent (Art. 6(1)(a)).
• Meeting legal obligations where applicable. Legal basis: compliance with a legal obligation (Art. 6(1)(c)).

4. Cookies and similar technologies

We use strictly necessary cookies to operate the site and, with your consent, optional analytics and marketing cookies. You can manage your choices at any time through the cookie settings on each page. For full details, please read our Cookie Policy.

5. Sharing your data

We do not sell your personal data. We may share it with trusted service providers who act as processors on our behalf, such as hosting, email, and analytics providers, under written agreements that require appropriate safeguards. We may also disclose data where required by law.

6. International transfers

Our servers and some providers may be located outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision, so that your data continues to receive an equivalent level of protection.

7. Retention periods

We keep personal data only for as long as necessary:

• Contact form messages: up to 24 months after your enquiry is resolved, unless a longer period is required by law.
• Consent records: up to 24 months, so we can demonstrate the choices you made.
• Analytics data: in aggregated or pseudonymised form for up to 14 months.

When a retention period ends, we delete or anonymise the data securely.

8. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data;
• restrict or object to certain processing;
• request data portability;
• withdraw consent at any time, without affecting prior processing;
• lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us using the details in section 1. You also have the right to complain to your local data protection authority.

9. Security measures

We apply appropriate technical and organisational measures to protect your data, including encryption in transit through HTTPS, access controls, regular updates, and the principle of data minimisation. No method of transmission or storage is completely secure, but we work to protect your information at all times.

10. Children's privacy

This website is intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with an updated date.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, please reach us at helpcenter@siftingherbal.world or through our contact page.